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DETAILED ACTION 

1 . In response to Board Decision on 30 June 20 1 0. 

2. An examiner's amendment to the record is attached. Please enter entire claim set. Should 
the changes and/or additions be unacceptable to applicant, an amendment may be filed as 
provided by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 



Conclusion 

3. Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. 

4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ellen C Tran whose telephone number is 

(571) 272-3842. The examiner can normally be reached from 7:30 am to 4:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Joseph G. Ustaris can be reached at (571) 272-7383. The fax phone number for the 
organization where this application or proceeding is assigned is (571) 273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

/ELLEN TRAN/ 

Primary Examiner, Art Unit 2433 
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Examiner's Amendment 

This listing of the claims will replace all prior versions and listings of the claims in the 
application: 

Listing of Claims : 

1 . (Currently Amended) A method of preventing a flooding attack on a network server in which 
a large number of connectionless datagrams are received for queuing to a port on the network 
server, comprising: 

determining, in response to the arrival of a connectionless datagram from a host for a port 
on the network server, if the number of connectionless datagrams already queued to the port 
from the host exceeds a prescribed threshold, further comprises calculating the prescribed 
threshold by multiplying a percentage by the number of available queue slots for the port ; 
discarding the datagram, if the number of connectionless datagram already queued to the port 
from the host exceeds the prescribed threshold; and 

queuing the connectionless datagram to a queue slot of the port, if the number of 
connectionless datagram already queued to the port from the host does not exceed the prescribed 
threshold. 

2. (Cancelled) 

3. ( Currently Amended) An apparatus for preventing a flooding attack on a network server in 
which a large number of datagrams are received for queuing to a port on the server, comprising: 

means for determining, in response to a datagram from a host for the port on the network 
server, if the number of datagrams queued on the port by the host exceeds a prescribed threshold, 
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further comprises means for calculating the prescribed threshold by multiplying a percentage by 
a number of available queue slots for the port ; 

means for discarding the datagram, if the number of datagrams queued on the port by the 
host exceeds the prescribed threshold; and 

means for queuing the datagram to a queue slot of the port, if the number of datagrams 
queued on the port by the host does not exceed the prescribed threshold. 

4. (Cancelled) 

5. (Currently Amended) A storage media containing program code that is operable by a 
computer for preventing a flooding attack on a network server in which a large number of 
datagrams are received for queuing to a port on the network server, the program code including 
instructions for causing the computer to execute the steps of: 

determining, in response to receiving a datagram from a host for the port on the network 
server, if the number of datagrams already queued to the port from the host exceeds a prescribed 
threshold, includes further instructions calculating the prescribed threshold by multiplying a 
percentage by a number of available queue slots for the port ; 

discarding the datagram, if the number of datagrams already queued to the port from the 
host exceeds the prescribed threshold; and 

queuing the datagram to a queue slot of the port, if the number of datagrams already 
queued to the port from the host does not exceed the prescribed threshold. 

6. (Canceled) 

7. (Canceled) 

8. (Canceled) 
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9. (Previously Presented) The method of claim 1 further comprising: 

configuring a maximum number of connectionless datagrams allowed to be queued at the port. 

10. (Previously Presented) The method of claim 9 wherein the configuring step further includes 
configuring a controlling percentage of available queue slots remaining for the port; and wherein 
the prescribed threshold is based on the controlling percentage of available queue slots remaining 
for the port. 

1 1 . (Previously Presented) The method of claim 1 wherein the port comprises a plurality of 
queue slots, the method further comprising: 

maintaining a number of available queue slots of the plurality of queue slots for the port. 

12. (Previously Presented) The apparatus of claim 3 further comprising: 

a means for configuring a maximum number of connectionless datagrams allowed to be 
queued at the port. 

13. (Previously Presented) The apparatus of claim 12 wherein the means for configuring further 
comprises means for configuring a controlling percentage of available queue slots remaining for 
the port. 

14. (Previously Presented) The storage media of claim 5 wherein the computer is the network 
server. 

/ELLEN TRAN/ 

Primary Examiner, Art Unit 2433 



